$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa File: AS206042.roa (raw, json) Hash identifier: vhmjMU2cmmIYx2on8tVUOnRBZ1aYUlFZzSQAhJFeYcc= Subject key identifier: 21:CC:26:EB:51:F9:AE:55:90:17:A2:2A:90:1F:49:E8:0F:C5:E0:D2 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2A2BF648149770B235EEE0A56F5930991678EBDF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa Signing time: Wed 02 Sep 2026 23:12:58 +0000 ROA not before: Wed 02 Sep 2026 23:07:58 +0000 ROA not after: Wed 01 Sep 2027 23:12:58 +0000 asID: 206042 IP address blocks: 2a05:dfc1:4b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 18:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2b:f6:48:14:97:70:b2:35:ee:e0:a5:6f:59:30:99:16:78:eb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Sep 2 23:07:58 2026 GMT Not After : Sep 1 23:12:58 2027 GMT Subject: CN=21CC26EB51F9AE559017A22A901F49E80FC5E0D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:b1:64:5f:84:c8:36:2f:4e:99:0e:90:9d: 65:ac:1b:33:3c:f7:33:57:7c:4c:54:fe:53:d1:92: 15:3e:e9:2f:c3:19:e0:3e:71:56:15:0e:13:09:98: a3:da:c4:6a:7b:93:28:4a:9b:67:89:b0:fb:75:6f: 8d:80:a7:14:22:2e:d9:a4:28:75:04:b9:80:59:d8: d9:1b:e8:b1:61:aa:67:7e:03:de:3f:cc:f9:98:f5: 51:e3:01:b5:9f:97:52:6b:dd:c2:b5:36:75:41:48: 39:98:e0:bd:cd:c6:1e:e9:2a:01:18:e4:e3:52:6e: ff:7e:30:72:5f:7e:f1:85:c7:55:c4:ba:e1:a1:36: ae:c1:b9:74:a5:f3:5a:2c:0f:68:78:01:22:8a:b7: e4:6e:dd:16:dd:77:c3:8a:ff:fd:b6:d9:99:a2:53: c1:f9:d7:9d:34:25:b0:8b:0a:5c:8a:ca:33:b4:1c: 77:ff:32:79:8a:36:03:97:41:b7:5c:16:c9:6d:7d: 7a:48:d8:18:33:62:db:78:4c:9f:8b:2e:d6:cc:2a: 8e:6f:9f:fc:c1:ed:64:dd:82:47:01:0e:73:8b:1c: f0:9d:a3:d4:89:a8:b5:02:da:10:4d:55:ff:8a:e4: a2:5a:15:36:20:5d:71:da:d6:c9:5f:0b:1a:e1:d3: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:26:EB:51:F9:AE:55:90:17:A2:2A:90:1F:49:E8:0F:C5:E0:D2 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 50:0b:4d:c1:6a:cb:2a:f0:32:86:bf:61:43:2b:9c:35:ba:8b: 9b:91:c0:4d:41:6f:6b:71:7e:27:54:73:2c:96:6d:f2:8b:ae: 0d:44:cd:a9:b9:ba:a3:50:be:cf:93:2e:54:54:a5:7e:62:46: 8b:fa:e2:4f:72:67:f2:2e:34:03:48:96:00:c6:33:05:37:1c: ac:ba:11:72:57:00:1d:b3:4e:09:47:6e:d9:aa:82:a0:d8:b5: d1:c6:15:97:74:a7:74:da:7a:a8:62:a3:f9:5f:15:88:2d:9d: 5e:5b:3a:e6:cc:9d:d8:e4:c5:fd:90:35:c7:48:51:de:3e:37: 04:5f:f9:42:f6:78:43:65:75:24:a0:b5:8d:a1:86:3e:1b:c1: 40:a7:b6:51:2f:21:1d:ef:09:fa:09:e1:66:f7:ac:d3:99:d0: 23:01:9a:b5:d9:51:86:23:f9:8e:47:f7:cd:50:04:f8:fa:5c: 8c:13:6c:2d:bd:eb:77:dd:a2:bf:35:61:d2:82:46:18:b5:00: c5:1c:a6:f1:81:eb:6a:6a:c5:de:8c:6c:e1:3d:ec:30:de:c0: 74:ca:b9:1a:56:6a:87:35:70:2b:86:28:9d:76:e8:21:f5:73: f3:69:dc:76:8b:49:97:94:42:ad:15:48:3f:7b:6a:ef:6f:66: ba:59:f6:c4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKiv2SBSXcLI17uClb1kwmRZ4698wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA5MDIyMzA3NThaFw0yNzA5MDEyMzEyNThaMDMxMTAvBgNV BAMTKDIxQ0MyNkVCNTFGOUFFNTU5MDE3QTIyQTkwMUY0OUU4MEZDNUUwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqrFkX4TINi9OmQ6QnWWsGzM8 9zNXfExU/lPRkhU+6S/DGeA+cVYVDhMJmKPaxGp7kyhKm2eJsPt1b42ApxQiLtmk KHUEuYBZ2Nkb6LFhqmd+A94/zPmY9VHjAbWfl1Jr3cK1NnVBSDmY4L3Nxh7pKgEY 5ONSbv9+MHJffvGFx1XEuuGhNq7BuXSl81osD2h4ASKKt+Ru3Rbdd8OK//222Zmi U8H51500JbCLClyKyjO0HHf/MnmKNgOXQbdcFsltfXpI2BgzYtt4TJ+LLtbMKo5v n/zB7WTdgkcBDnOLHPCdo9SJqLUC2hBNVf+K5KJaFTYgXXHa1slfCxrh0+A1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUIcwm61H5rlWQF6IqkB9J6A/F4NIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUswDQYJKoZIhvcNAQELBQADggEBAFAL TcFqyyrwMoa/YUMrnDW6i5uRwE1Bb2txfidUcyyWbfKLrg1Ezam5uqNQvs+TLlRU pX5iRov64k9yZ/IuNANIlgDGMwU3HKy6EXJXAB2zTglHbtmqgqDYtdHGFZd0p3Ta eqhio/lfFYgtnV5bOubMndjkxf2QNcdIUd4+NwRf+UL2eENldSSgtY2hhj4bwUCn tlEvIR3vCfoJ4Wb3rNOZ0CMBmrXZUYYj+Y5H981QBPj6XIwTbC2963fdor81YdKC Rhi1AMUcpvGB62pqxd6MbOE97DDewHTKuRpWaoc1cCuGKJ126CH1c/Np3HaLSZeU Qq0VSD97au9vZrpZ9sQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:25:27 2026 by rpki-client